Question 1

Which of the following malware takes advantage of a security vulnerability on the same day that the vulnerability becomes known to the public?

Accepted Answer

A)   Ransomware
B)   Screen scraper
C)   Bot
D)   Zero-day exploitE) None of the above
F) A) and D)

Question 2

Which of the following statements best describes a Trojan?

Accepted Answer

A)   Malicious software that hides into the lower levels of the operating system and opens a backdoor
B)   Malicious software that records every key stroke and mouse movement
C)   Malicious software that disguises itself as a legitimate program
D)   Malicious software that takes the computer data hostage to extort moneyE) B) and D)
F) B) and C)

Question 3

Which of the following statements best describes data replication?

Accepted Answer

A)   The process of copying data to another drive weekly
B)   The process of copying data to a second location that is available for immediate use
C)   The process of copying and storing data that could be restored to its original location
D)   The process of copying data to the cloudE) B) and D)
F) None of the above

Question 4

Which of the following log analysis techniques compares the log entries against a set of known bad activity?

Accepted Answer

A)   Trend analysis
B)   Signature analysis
C)   Correlation analysis
D)   Sequencing analysisE) B) and C)
F) A) and C)

Question 5

Which of the following refers to an internal procedure by which authorized changes are made to software, hardware, network access privileges, or business processes?

Accepted Answer

A)   Change control
B)   NIST framework
C)   Standard operating procedure
D)   Patch managementE) B) and D)
F) B) and C)

Question 6

Which of the following is a snippet of code designed to automate tasks and often used by attackers to carry out denial-of-service attacks?

Accepted Answer

A)   Ransomware
B)   Screen scraper
C)   Zero-day exploit
D)   BotE) B) and D)
F) B) and C) D

Question 7

Which of the following is an SMB exploit affecting various Windows operating systems from XP to Windows 7 and various versions of Windows Server 2003 and 2008?

Accepted Answer

A)   EternalBlue
B)   SpyEye
C)   Slammer
D)   ZeusE) All of the above
F) B) and D)

Question 8

Which of the following statements about antivirus software is not true?

Accepted Answer

A)   Antivirus software is 100 percent effective against malware intrusions.
B)   Antivirus software uses signature-based recognition and behavior-based recognition to detect malware.
C)   Antivirus software can detect various types of malware.
D)   Antivirus software can detect, contain, or eliminate malware.E) A) and B)
F) All of the above

Question 9

Which common standard operating procedure (SOP)  format should be used for long procedures requiring many decisions?

Accepted Answer

A)   Hierarchical
B)   Simple step
C)   Graphical
D)   FlowchartE) A) and D)
F) A) and C)

Question 10

Which of the following statements about data backup is not true?

Accepted Answer

A)   Backups can be stored in the cloud.
B)   Backups can be conducted once a week.
C)   Backups do not have to be restored as long as they are stored in the cloud.
D)   Backups can be stored to a tape.E) A) and D)
F) B) and C)

Question 11

Which of the following best describes the difference between a virus and a worm?

Accepted Answer

A)   A virus is malicious software that requires a host file to spread itself, whereas a worm is malicious software that does not require a host file to spread itself.
B)   A worm is malicious software that requires a host file to spread itself, whereas a virus is malicious software that does not require a host file to spread itself.
C)   A virus is malicious software that attaches itself to executable files, whereas a worm is malicious software that attaches itself to an image file.
D)   There is no difference between a virus and a worm.E) A) and B)
F) A) and C)

Question 12

Which of the following describes the process or methodology used to assess the adequacy of a service provider?

Accepted Answer

A)   Sequencing
B)   Due care
C)   Trend analysis
D)   Due diligenceE) C) and D)
F) B) and C)

Question 13

Which of the following statements about Trojans is true?

Accepted Answer

A)   Trojans reproduce by infecting other files.
B)   Trojans need user interaction to spread.
C)   Trojans self-replicate.
D)   Trojans are legitimate programs that enhance user experience.E) A) and B)
F) B) and D)

Question 14

Which of the following is an example of ransomware that takes a computer or its data hostage in an effort to extort money from victims?

Accepted Answer

A)   SpyEye
B)   WannaCry
C)   Sapphire
D)   SlammerE) A) and B)
F) B) and C) B

Question 15

Which federal regulation requires financial institutions to protect their customers' information against security threats?

Accepted Answer

A)   HIPAA
B)   GLBA
C)   PCI DSS
D)   FISMAE) B) and C)
F) None of the above

Question 16

Which of the following was a worm that infected Microsoft SQL Server 2000 and Microsoft SQL Desktop Engine?

Accepted Answer

A)   Zeus
B)   SpyEye
C)   Slammer
D)   NyetyaE) None of the above
F) A) and B) C

Question 17

Which of the following is an example of a malware prevention control?

Accepted Answer

A)   Real-time firewall detection of suspicious file downloads
B)   Review and analysis of log files
C)   User awareness to recognize and report suspicious activity
D)   Not allowing users to have administrative rights to their workstationsE) A) and B)
F) None of the above

Question 18

Which of the following best describes the log analysis technique called trend analysis?

Accepted Answer

A)   Compares log data to known bad activity
B)   Compares log data to known good activity
C)   Identifies activity over time that in isolation might appear normal
D)   Ties individual entries together based on related informationE) B) and D)
F) C) and D)

Question 19

Which of the following is a word, phrase, or image that is programmatically configured to connect to another document, bookmark, or location?

Accepted Answer

A)   Hyperlink
B)   Log
C)   Relay
D)   MetadataE) A) and B)
F) A) and C)

Exam 8: Communications and Operations Security

Which of the following malware takes advantage of a security vulnerability on the same day that the vulnerability becomes known to the public?

Correct Answer
verified

Which of the following statements best describes a Trojan?

Correct Answer
verified

Which of the following statements best describes data replication?

Correct Answer
verified

Which of the following log analysis techniques compares the log entries against a set of known bad activity?

Correct Answer
verified

Which of the following refers to an internal procedure by which authorized changes are made to software, hardware, network access privileges, or business processes?

Correct Answer
verified

Which of the following is a snippet of code designed to automate tasks and often used by attackers to carry out denial-of-service attacks?

Correct Answer
verified
D

Which of the following is an SMB exploit affecting various Windows operating systems from XP to Windows 7 and various versions of Windows Server 2003 and 2008?

Correct Answer
verified

Which of the following statements about antivirus software is not true?

Correct Answer
verified

Which common standard operating procedure (SOP) format should be used for long procedures requiring many decisions?

Correct Answer
verified

Which of the following statements about data backup is not true?

Correct Answer
verified

Which of the following best describes the difference between a virus and a worm?

Correct Answer
verified

Which of the following describes the process or methodology used to assess the adequacy of a service provider?

Correct Answer
verified

Which of the following statements about Trojans is true?

Correct Answer
verified

Which of the following is an example of ransomware that takes a computer or its data hostage in an effort to extort money from victims?

Correct Answer
verified
B

Which federal regulation requires financial institutions to protect their customers' information against security threats?

Correct Answer
verified

Which of the following was a worm that infected Microsoft SQL Server 2000 and Microsoft SQL Desktop Engine?

Correct Answer
verified
C

Which of the following is an example of a malware prevention control?

Correct Answer
verified

Which of the following best describes the log analysis technique called trend analysis?

Correct Answer
verified

Which of the following is a word, phrase, or image that is programmatically configured to connect to another document, bookmark, or location?

Correct Answer
verified

Exam 8: Communications and Operations Security

Which of the following malware takes advantage of a security vulnerability on the same day that the vulnerability becomes known to the public?

Correct AnswerverifiedShow Answer

Which of the following statements best describes a Trojan?

Correct AnswerverifiedShow Answer

Which of the following statements best describes data replication?

Correct AnswerverifiedShow Answer

Which of the following log analysis techniques compares the log entries against a set of known bad activity?

Correct AnswerverifiedShow Answer

Which of the following refers to an internal procedure by which authorized changes are made to software, hardware, network access privileges, or business processes?

Correct AnswerverifiedShow Answer

Which of the following is a snippet of code designed to automate tasks and often used by attackers to carry out denial-of-service attacks?

Correct AnswerverifiedD

Which of the following is an SMB exploit affecting various Windows operating systems from XP to Windows 7 and various versions of Windows Server 2003 and 2008?

Correct AnswerverifiedShow Answer

Which of the following statements about antivirus software is not true?

Correct AnswerverifiedShow Answer

Which common standard operating procedure (SOP) format should be used for long procedures requiring many decisions?

Correct AnswerverifiedShow Answer

Which of the following statements about data backup is not true?

Correct AnswerverifiedShow Answer

Which of the following best describes the difference between a virus and a worm?

Correct AnswerverifiedShow Answer

Which of the following describes the process or methodology used to assess the adequacy of a service provider?

Correct AnswerverifiedShow Answer

Which of the following statements about Trojans is true?

Correct AnswerverifiedShow Answer

Which of the following is an example of ransomware that takes a computer or its data hostage in an effort to extort money from victims?

Correct AnswerverifiedB

Which federal regulation requires financial institutions to protect their customers' information against security threats?

Correct AnswerverifiedShow Answer

Which of the following was a worm that infected Microsoft SQL Server 2000 and Microsoft SQL Desktop Engine?

Correct AnswerverifiedC

Which of the following is an example of a malware prevention control?

Correct AnswerverifiedShow Answer

Which of the following best describes the log analysis technique called trend analysis?

Correct AnswerverifiedShow Answer

Which of the following is a word, phrase, or image that is programmatically configured to connect to another document, bookmark, or location?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
D

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified
C

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified